BearParser
Portable Executable parsing library (from PE-bear)
|
#include <DosHdrWrapper.h>
Public Types | |
enum | DosFieldId { NONE = FIELD_NONE , MAGIC = 0 , CBLP , CP , CRLC , CPARHDR , MINALLOC , MAXALLOC , SS , SP , CSUM , IP , CS , LFARLC , OVNO , RES , OEMID , OEMINFO , RES2 , LFNEW , FIELD_COUNTER } |
Public Member Functions | |
DosHdrWrapper (Executable *dosExe) | |
virtual void * | getPtr () |
virtual bufsize_t | getSize () |
virtual QString | getName () |
virtual size_t | getFieldsCount () |
virtual void * | getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE) |
virtual QString | getFieldName (size_t fieldId) |
virtual Executable::addr_type | containsAddrType (size_t fieldId, size_t subField=FIELD_NONE) |
Public Member Functions inherited from ExeElementWrapper | |
ExeElementWrapper (Executable *exe) | |
virtual | ~ExeElementWrapper () |
virtual bool | wrap () |
virtual bufsize_t | getContentSize () |
virtual BYTE * | getContent () |
virtual size_t | getSubFieldsCount () |
virtual offset_t | getOffset () |
virtual offset_t | getOffset (void *ptr, bool allowExceptions=false) |
void * | getFieldPtr (size_t fieldId) |
virtual bufsize_t | getFieldSize (size_t fieldId, size_t subField=FIELD_NONE) |
virtual offset_t | getFieldOffset (size_t fieldId, size_t subField=FIELD_NONE) |
virtual QString | translateFieldContent (size_t fieldId) |
virtual bool | hasSubfieldWrapper (size_t parentType) |
virtual WrappedValue | getWrappedValue (size_t fieldId, size_t subField) |
virtual WrappedValue | getWrappedValue (size_t fieldId) |
virtual WrappedValue::data_type | containsDataType (size_t fieldId, size_t subField=FIELD_NONE) |
virtual uint64_t | getNumValue (size_t fieldId, size_t subField, bool *isOk) |
uint64_t | getNumValue (size_t fieldId, bool *isOk) |
virtual bool | setNumValue (size_t fieldId, size_t subField, uint64_t val) |
bool | setNumValue (size_t fieldId, uint64_t val) |
Executable * | getExe () |
bool | isBit64 () |
bool | isBit32 () |
Public Member Functions inherited from AbstractByteBuffer | |
AbstractByteBuffer () | |
virtual | ~AbstractByteBuffer () |
virtual bool | isTruncated () |
virtual bool | isResized () |
BYTE | operator[] (size_t idx) |
virtual BYTE * | getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false) |
virtual BYTE * | getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false) |
virtual bool | setBufferedValue (BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false) |
bool | setStringValue (offset_t rawOffset, QString newText) |
QString | getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false) |
QString | getWStringValue (offset_t rawOffset, bufsize_t len) |
QString | getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false) |
bufsize_t | getMaxSizeFromOffset (offset_t startOffset) |
bufsize_t | getMaxSizeFromPtr (BYTE *ptr) |
bool | isAreaEmpty (offset_t rawOffset, bufsize_t size) |
bool | fillContent (BYTE filling) |
bool | pasteBuffer (offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc) |
bool | containsBlock (offset_t rawOffset, bufsize_t size) |
bool | intersectsBlock (offset_t rawOffset, bufsize_t size) |
uint64_t | getNumValue (offset_t offset, bufsize_t size, bool *isOk) |
bool | setNumValue (offset_t offset, bufsize_t size, uint64_t newVal) |
bool | setTextValue (char *textPtr, std::string newText, size_t fieldLimitLen=0) |
virtual bool | resize (bufsize_t newSize) |
offset_t | substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn) |
Additional Inherited Members | |
Static Public Member Functions inherited from AbstractByteBuffer | |
static bool | isValid (AbstractByteBuffer *buf) |
Protected Member Functions inherited from ExeElementWrapper | |
virtual bool | canCopyToOffset (offset_t rawOffset) |
bool | copyToOffset (offset_t rawOffset) |
Protected Attributes inherited from ExeElementWrapper | |
Executable * | m_Exe |
Definition at line 8 of file DosHdrWrapper.h.
Enumerator | |
---|---|
NONE | |
MAGIC | |
CBLP | |
CP | |
CRLC | |
CPARHDR | |
MINALLOC | |
MAXALLOC | |
SS | |
SP | |
CSUM | |
IP | |
CS | |
LFARLC | |
OVNO | |
RES | |
OEMID | |
OEMINFO | |
RES2 | |
LFNEW | |
FIELD_COUNTER |
Definition at line 12 of file DosHdrWrapper.h.
|
inline |
Definition at line 36 of file DosHdrWrapper.h.
|
virtual |
Reimplemented from ExeElementWrapper.
Definition at line 65 of file DosHdrWrapper.cpp.
|
virtual |
Implements ExeElementWrapper.
Definition at line 39 of file DosHdrWrapper.cpp.
|
virtual |
Implements ExeElementWrapper.
Definition at line 4 of file DosHdrWrapper.cpp.
|
inlinevirtual |
Implements ExeElementWrapper.
Definition at line 42 of file DosHdrWrapper.h.
|
inlinevirtual |
Implements ExeElementWrapper.
Definition at line 41 of file DosHdrWrapper.h.
|
inlinevirtual |
Implements ExeElementWrapper.
Definition at line 39 of file DosHdrWrapper.h.
|
inlinevirtual |
Implements ExeElementWrapper.
Definition at line 40 of file DosHdrWrapper.h.